DE102016215628B4 - Communication system for managing usage rights to a vehicle - Google Patents

Abstract

Communication system (10) for managing usage rights to a vehicle (12), with
- a vehicle (12) which comprises an in-vehicle communication module (14a, 14b);
- a mobile terminal (16); and
- an electronic vehicle key (18) which is set up to communicate with the in-vehicle communication module (14a, 14b) and with the mobile terminal (16) and by means of which usage rights to the vehicle (12) can be assigned; The use of the mobile terminal (16) can be used to control the assignment of usage rights to the vehicle (12) that can be carried out by the electronic vehicle key (18), characterized in that vehicle functions and / or mobile online services can be acquired by means of the electronic vehicle key (18) and the acquisition of the vehicle functions and / or the mobile online services which can be carried out by means of the electronic vehicle key (18) can be controlled by means of the mobile terminal (16).

Description

The invention relates to a communication system for managing usage rights to a vehicle.

The functionality of electronic vehicle keys will continue to increase in the future. For example, electronic vehicle keys will not only be used to lock and unlock the vehicle doors, but will also allow management of usage rights to a vehicle.

The increasing range of functions of an electronic vehicle key, however, is offset by its small size, which considerably limits the ease of use. A compact electronic vehicle key can only have a limited number of input elements and can provide the user with information to a limited extent.

From the publication DE 20 2011 105 142 U1 For example, an electronic vehicle key with an integrated color display is known, which also has a combined function and menu key and has advanced touchscreen technology for remote control of the vehicle access and authorization system.

However, the touchscreen of an electronic vehicle key can also have only limited dimensions so that the handiness of the electronic vehicle key is not impaired. Touchscreens of this size are neither suitable for clearly displaying information nor for conveniently managing usage rights. If the dimensions of the built-in touchscreen are increased, on the other hand, there is a considerable impairment of the ease of use, since it is no longer possible to carry the electronic vehicle key, for example on a keychain.

In addition, the integration of display devices, such as touchscreens, as well as the fitting of an electronic vehicle key with several communication modules leads to a considerably increased energy requirement. Due to the small size of an electronic vehicle key, only batteries with a limited size and thus a limited capacity can be installed. Additional electronic components result in rapid discharge, forcing the user to replace the batteries regularly. In the case of a rechargeable vehicle key battery, regular recharging is necessary. Both the battery replacement and the charging of the vehicle key battery lead to a considerable impairment of user comfort.

Regarding the management of usage rights is out DE 10 2012 022 786 A1 a method for an access system for a vehicle is known, the access system comprising a control device, an identification device assigned to the control device and a mobile terminal. A function of the control device can be controlled as a function of authentication information stored in the mobile terminal and the control device via the mobile terminal. In the method, identification information of the identification device is verified by the control device. If the verification is successful, the authentication information is generated in the control device and transmitted from the control device to the mobile terminal.

The publication US 2011/0112969 A1 discloses a vehicle access control wherein a vehicle reservation is sent from a wireless communication device to a central server using cellular radio. The central server checks the vehicle reservation, the vehicle being released after the check has been carried out.

From the publication DE 10 2013 006 070 A1 A method is also known for the transmission of vehicle-specific information to a user's end device by means of wireless communication, an information and communication unit being provided in a respective vehicle, with the aid of which a specific data of the respective vehicle is acquired by means of a data connection, and this, possibly together with other customer-relevant data, are transferred to the user's device. The end device or an application to be run on it enables the user to book and open the respective vehicle as part of a car sharing system.

From the publication DE 10 2011 011 697 A1 a locking system and a method for controlling access authorization or driving authorization for a vehicle are known. Furthermore, from the publication DE 10 2014 222 426 A1 a radio key for adapting a configuration of a means of transportation and from the publication DE 10 2014 222 427 a method for adapting an association between a user profile and a radio key is known.

The known electronic vehicle keys are not sufficiently suitable for managing usage calculations on a vehicle. Other known solutions dispense with the integration of an electronic vehicle key in the management of usage rights on a vehicle, which causes considerable safety risks.

The invention is based on the object of providing a communication system for managing usage rights which can be operated comfortably by a user and which has increased security compared to other solutions.

This object is achieved by a communication system according to claim 1.

The communication system according to the invention for managing usage rights to a vehicle comprises a vehicle, a mobile terminal and an electronic vehicle key. The vehicle includes an in-vehicle communication module. The electronic vehicle key is set up to communicate with the in-vehicle communication module and with the mobile terminal, with the use of the electronic vehicle key permitting usage rights to the vehicle. The assignment of usage rights to the vehicle, which can be carried out by the electronic vehicle key, can be controlled by means of the mobile terminal. The usage rights to the vehicle can be assigned, for example, to electronic foreign keys, other electronic portable devices, selected users and / or their user accounts. Vehicle functions and / or mobile online services can also be acquired by means of the electronic vehicle key, the acquisition of the vehicle functions and / or the mobile online services which can be carried out by means of the electronic vehicle key being controllable by means of the mobile terminal. The vehicle functions and / or mobile online services that can be acquired using the electronic vehicle key can include, for example, the locking and unlocking function, the driving function, safety functions such as the airbag function, driver assistance functions such as an automatic distance control, automatic cruise control and / or a lane departure warning function, Adjustment functions, such as seat or mirror adjustment functions, include comfort functions, such as seat air conditioning, interior air conditioning, the navigation function or the infotainment function of one or more vehicles.

The communication system according to the invention has the advantage that the electronic vehicle key is involved in the assignment of usage rights to the vehicle. When assigning rights of use to the vehicle, for example to an electronic third-party key, possession of the electronic vehicle key is therefore always necessary, which significantly increases security. At the same time, however, usage rights are not assigned by a user operating the electronic vehicle key, but rather by operating the mobile terminal. In this way, the user is provided with the display and control elements of the mobile terminal for assigning usage rights to the vehicle, so that the ease of use is considerably increased. To further increase comfort, the electronic vehicle key can also have a display or a touchscreen.

The electronic vehicle key preferably uses a first key-internal communication module for communication with the mobile terminal and a second key-internal communication module for communication with the vehicle-internal communication module. The first internal communication module and the second internal communication module preferably use different communication standards. For example, communication takes place between the mobile terminal and the electronic vehicle key and / or between the electronic vehicle key and the in-vehicle communication module with 20 kHz, 125 kHz, 130 kHz, 433 MHz, 868 MHz, 315 MHz, via Bluetooth, via infrared, via RFID , via mobile radio, via the Internet or using a local network. The mobile device can be, for example, a smartphone or a tablet.

The electronic vehicle key can also be used to revoke usage rights to the vehicle, and the withdrawal of usage rights to the vehicle that can be carried out by means of the electronic vehicle key can be controllable by means of the mobile terminal. In particular, if usage rights to the vehicle are granted without a time limit, it is particularly important that the assigned usage rights to the vehicle can also be withdrawn retrospectively. The fact that the usage rights to the vehicle can be withdrawn by the electronic vehicle key and the operation is carried out by the mobile device ensures a high degree of security and ease of use. The usage rights to the vehicle can be withdrawn, for example, from electronic foreign keys, other electronic portable devices, selected users and / or their user accounts.

The usage rights to the vehicle can include individual or all vehicle functions. Vehicle functions are, for example, the locking and unlocking function, the driving function of the vehicle, safety functions such as the airbag function, driver assistance functions, such as automatic distance control, automatic cruise control and / or a lane departure warning function, setting functions such as seat or mirror adjustment functions, comfort functions such as seat air conditioning, interior air conditioning, navigation function or the infotainment function. In certain situations, the release of individual vehicle functions may be sufficient to use the vehicle. In other situations, all vehicle functions can also be enabled at the same time, so that the vehicle can be used without restriction.

The assignment and / or the withdrawal of rights of use to the vehicle can be entity-related. Preferably, the assignment and / or the withdrawal of rights of use to the vehicle are personal. Thus, individual or all vehicle functions can be limited to one or more people at the same time or released indefinitely. The assignment and / or revocation of rights of use to the vehicle can also take place indirectly, so that, for example, user accounts and / or electronic vehicle keys of selected people can be granted or withdrawn rights of use for the vehicle.

The acquired vehicle functions and / or the acquired mobile online services can also be used with several vehicles. In particular, the acquired vehicle functions and / or the acquired mobile online services can be used for a group of vehicles. This is advantageous, for example, in the area of car sharing. A user can thus, for example, purchase vehicle functions and / or mobile online services for all or individual vehicles which are located within a predetermined area, for example within an urban area. The user can thus make a selection of vehicle functions and / or mobile online services which he would like to use when using the vehicles located within the urban area. The rights of use associated with the purchase of one or more vehicles are linked to the electronic vehicle key or a user account and can be demonstrated to a vehicle, for example, by having the electronic vehicle key or registering with a user account on the respective vehicle.

The communication system can comprise an administration system which is set up to manage the usage rights to vehicles and / or the acquisition of vehicle functions and / or mobile online services. The management system can be provided by a vehicle manufacturer or a third party, for example. A corresponding administration system can considerably simplify the administration of usage rights to vehicles and / or the acquisition of vehicle functions and / or mobile online services.

A vehicle management application which is set up to access the management system can be installed on the electronic vehicle key and / or the mobile terminal. In particular, the electronic vehicle key and / or the mobile terminal have corresponding communication modules so that the vehicle management application can access the management system. A user can preferably call up a user account via the vehicle management application, in particular by means of a user name and a password. In the user account, personal data of the user and information on the purchase transaction are preferably stored. In addition, the vehicle management application can be used to manage usage rights to the vehicle and / or to acquire vehicle functions and / or mobile online services.

The vehicle management application can be set up to display a graphical user interface on the mobile terminal for managing the usage rights to the vehicle and / or for purchasing vehicle functions and / or mobile online services. For example, the vehicle management application comprises a menu structure which is displayed to the user of the mobile terminal. By appropriately selecting a menu item, the user can release or withdraw usage rights to the vehicle from other people. Alternatively or additionally, the user can purchase vehicle functions and / or mobile online services by selecting a corresponding menu item. The graphical user interface is preferably designed in such a way that it allows convenient operation via a touchscreen.

At least part of the management system can be implemented as a decentralized management system on the electronic vehicle key. Due to the fact that the management system is implemented decentrally on the electronic vehicle key, no connection to a central computer is necessary, whereby the granting of rights of use to the vehicle, for example to electronic foreign keys, other electronic portable devices, selected users and / or their user accounts, the withdrawal these usage rights to the vehicle and the acquisition of vehicle functions and / or mobile online services are considerably simplified. In particular, the Allocation and / or revocation of rights of use to the vehicle and the acquisition of vehicle functions and / or mobile online services take place without an Internet connection being necessary. This can be advantageous, for example, in locations without network availability, such as in underground car parks, or in the management of rights of use for vehicles in a vehicle fleet.

The communication system can furthermore have a central computer, the central computer comprising at least part of the management system. The central computer is preferably designed as a server and / or as a backend of a vehicle manufacturer or a third-party provider. The central computer can comprise a database, which the administration system accesses for the administration of usage rights to vehicles and the acquisition of vehicle functions and / or mobile online services. For example, the central computer is connected to the Internet. In particular, the vehicle management application is set up to establish a communication connection with the central computer, in particular via the Internet.

The mobile terminal can be set up to release an internal communication module to the electronic vehicle key, wherein the electronic vehicle key can be set up to use the released internal communication module of the mobile terminal. The device-internal communication module can be a radio module, for example, which allows the connection to a local radio network and / or the establishment of a mobile radio connection. The communication options of the electronic vehicle key are thus expanded without the hardware required for this being present in the electronic vehicle key. In this way it is avoided that due to additional communication units within the electronic vehicle key, further space requirements and an additional energy requirement arise. The life of the vehicle key battery is thus not affected, although the communication ability of the electronic vehicle key is expanded. In particular, the electronic vehicle key can be connected to the Internet via the released communication module of the mobile terminal. An Internet connection of the electronic vehicle key allows access to the key from other devices that are connected to the Internet. For example, the electronic vehicle key can thus be accessed from a remote position by means of another mobile terminal, such as a smartphone or tablet, or a personal computer, if the internet connectivity of the mobile terminal is available to it. The mobile terminal can also be set up to communicate directly with an in-vehicle communication module. Thus, not only direct communication between the electronic vehicle key and the vehicle is possible, but also direct communication between the mobile terminal and the vehicle. The in-vehicle communication module which serves for communication between the mobile terminal and the vehicle can either be the same or a different in-vehicle communication module than that which is used for communication between the electronic vehicle key and the vehicle. The mobile terminal can also be set up to communicate with the central computer, preferably via the releasable device-internal communication module of the mobile terminal. In addition, the electronic vehicle key can be set up to communicate with the central computer, preferably via the releasable device-internal communication module of the mobile terminal. This means that the electronic vehicle key can log on directly to the central computer.

The electronic vehicle key can be set up to authorize other electronic vehicle keys to communicate with the in-vehicle communication module. The authorization can include the use of vehicle functions and / or mobile online services, for example. The in-vehicle communication module can be the same or a different in-vehicle communication module than the one with which the electronic vehicle key communicates. Other electronic vehicle keys can be authorized via a challenge-response procedure.

The electronic vehicle key can be a personalized and / or personal electronic vehicle key. Such an electronic vehicle key is preferably issued by a vehicle manufacturer for use by a user or a user group and is fundamentally not permanently linked to a specific vehicle. The user or the user group have the possibility, for example, of coupling the electronic vehicle key to an appropriate management system, for example the central computer, or locally to one or more vehicles in order to be able to use these vehicles with the electronic vehicle key. When entering the vehicle, the user is then preferably logged on automatically with a customer account stored on the electronic vehicle key. You can also use this customer account Permissions and / or purchased vehicle functions or purchased mobile online services can be coupled. For example, two-factor authentication is required to log on. In particular, the electronic vehicle key provides a cryptographic factor for two-factor authentication, in particular proof of ownership. The electronic vehicle key thus also serves as proof of authentication. Alternatively, the electronic vehicle key can also be a conventional vehicle-bound electronic vehicle key.

The electronic vehicle key can be set up to communicate with several different in-vehicle communication modules and / or with several different mobile devices. As a result, the electronic vehicle key can be used for several vehicles. The corresponding user authorizations for the plurality of vehicles are preferably also stored in the user account of the user. If the electronic vehicle key is set up to communicate with a plurality of mobile terminals, the use of the electronic vehicle key by a user group is considerably simplified. The members of the user group can therefore access the electronic vehicle key with their mobile devices. However, for security reasons it may be advisable or even necessary that the electronic vehicle key can only be coupled to one mobile device at the same time in order to prevent misuse.

The electronic vehicle key can also be set up to cryptographically secure messages to be sent against modification and / or interception, in particular to sign them cryptographically. Because the electronic vehicle key is suitable for cryptographically signing messages to be sent, the authenticity of the messages can be checked. The electronic vehicle key can include a memory on which cryptographic material is stored. The data on the memory of the electronic vehicle key can be stored partially or completely as plain text or as deciphering and / or as cipher text. The ciphertext may have been generated from a plain text either by a reversible process or by an irreversible process. If the ciphertext has been generated from a plaintext by a reversible process, the creation process can be reversed in order to generate the cleartext from the ciphertext. If the ciphertext was generated from a plaintext by an irreversible process, then the plaintext cannot be generated by reversing the creation process from the ciphertext. The irreversible process can be based on a hash function.

The electronic vehicle key can provide an open API (application programming interface). The mobile terminal can communicate directly with the electronic vehicle key using available communication technology, such as Bluetooth, NFC, ZigBee, USB. To secure the communication between the mobile terminal and the electronic vehicle key, authentication can take place between the electronic vehicle key and the mobile terminal. Authentication can be one-sided or two-sided. The presence of the remote station can be checked through the authentication. The communication between the mobile terminal and the electronic vehicle key can also be encrypted and / or authenticated by choosing a cryptographic solution for protection. The vehicle management application and the logic preferably run on the mobile terminal. The vehicle management application can thus access the functions and the memory of the electronic vehicle key.

Alternatively, there is a trusted execution environment (TEE) on the electronic vehicle key. Only applications that have been approved or released by the manufacturer of the vehicle preferably run in this runtime environment. These applications can preferably also be introduced into the runtime environment only via a secured process. The nature of this process depends on the technology used in the runtime environment. The mobile terminal is preferably set up to establish a remote maintenance session with the electronic vehicle key during the coupling, for example via virtual network computing. The mobile device is used in this case as a pure display and control device and / or serves as an interface to the Internet. The vehicle management application therefore runs on the electronic vehicle key and the calculation of the surfaces and graphics is also carried out on the electronic vehicle key. These surfaces are then sent to the mobile device for display. The other way around, the mobile terminal sends control commands and / or data from the Internet to the electronic vehicle key in the secured environment. The application logic runs entirely on the electronic vehicle key and is therefore under the control of the vehicle manufacturer. Corresponding security or authentication of the data from the mobile terminal, for example the control commands and / or the data from the Internet, is preferably carried out, so that none incorrect or manipulated data can penetrate the secure runtime environment.

The user data are preferably secured on the mobile terminal and / or the electronic vehicle key. For example, security is provided by a PIN or password query when connecting between the mobile device and the electronic vehicle key. In this way, simple and easy access protection against manipulation is offered.

Further preferred embodiments of the invention result from the other features mentioned in the subclaims. Unless otherwise stated in the individual case, the various embodiments of the invention mentioned in this application can advantageously be combined with one another.

• 1 ein Ausführungsbeispiel des erfindungsgemäßen Kommunikationssystems in einer schematischen Darstellung.

The invention is explained below using an exemplary embodiment with reference to the accompanying drawing. It shows:

• 1 an embodiment of the communication system according to the invention in a schematic representation.

1 shows a communication system 10 to manage usage rights to a vehicle 12 , The communication system 10 includes a vehicle 12 , a mobile device 16 , an electronic vehicle key 18 and a central computer 20 ,

The vehicle 12 has two in-vehicle communication modules 14a . 14b on. Using the in-vehicle communication module 14a communicates the vehicle 12 with the electronic vehicle key 18 , For communication between the in-vehicle communication module 14a and the electronic vehicle key 18 becomes the communication connection based on the Bluetooth standard 24 used. Using the in-vehicle communication module 14b communicates the vehicle 12 with the mobile device 16 and the central computer 20 , For communication between the in-vehicle communication module 14b and the mobile device 16 becomes the communication link based on mobile communications 26 used. For communication between the in-vehicle communication module 14b and the central computer 20 becomes the communication link based on mobile communications 30 used.

The mobile device 16 is set up the electronic vehicle key 18 release a device-internal communication module, the electronic vehicle key 18 is set up for this purpose, the released device-internal communication module of the mobile terminal 16 to use. So the electronic vehicle key 18 via the releasable device-internal communication module of the mobile device 16 with the central computer 20 communicate. The central computer 20 is namely set up with the mobile device 16 over the communication link 28 to communicate. The electronic vehicle key 18 is a personalized and personal electronic vehicle key 18 , which is set up to cryptographically secure messages to be protected against modification and / or interception.

The communication system 10 also has an administrative system 21a . 21b on, which is set up to manage the usage rights to vehicles and the acquisition of vehicle functions and mobile online services. A first part 21a of the administrative system 21a . 21b is a decentralized management system on the electronic vehicle key 18 executed. A second part 21b of the administrative system 21a . 21b is the central administration system on the central computer 20 executed.

The electronic vehicle key 18 is set up with the mobile device 16 over the communication link 22 to communicate. On the electronic vehicle key 18 and on the mobile device 16 a vehicle management application is installed, which is set up to the management system 21a . 21b to access, wherein the vehicle management application is configured to a graphical interface for managing the rights of use to the vehicle 12 and to purchase vehicle functions and mobile online services on the mobile device 16 display.

Using the electronic vehicle key 18 are rights to use the vehicle 12 forgivable and withdrawable. In addition, by means of the electronic vehicle key 18 Vehicle functions and / or mobile online services can be acquired.

The through the electronic vehicle key 18 feasible assignment of rights of use to the vehicle 12 and that through the electronic vehicle key 18 feasible withdrawal of rights of use to the vehicle 12 is by means of the mobile device 16 controllable. It is also through the electronic vehicle key 18 feasible acquisition of vehicle functions and mobile online services using the mobile device 16 controllable.

The assignment and revocation of usage rights to the vehicle 12 is personal, the rights of use to the vehicle 12 all vehicle functions include, namely for example the locking and unlocking function, the driving function of the vehicle 12 , Safety functions such as the airbag function, driver assistance functions such as an automatic distance control, automatic cruise control and / or a lane departure warning function, setting functions such as seat or mirror adjustment functions, comfort functions such as seat air conditioning, interior air conditioning, navigation function or the infotainment function. The acquired vehicle functions and the acquired mobile online services can also be used with several vehicles.

The fact that the allocation and withdrawal of rights of use to the vehicle and the acquisition of vehicle functions and mobile online services that can be carried out by the electronic vehicle key can be controlled by means of the mobile terminal device, the ease of use is considerably increased by the invention, due to the necessity of owning the electronic vehicle key a high degree of security is guaranteed.

LIST OF REFERENCE NUMBERS

10

communication system

12

vehicle

14a, 14b

in-vehicle communication modules

16

mobile device

18

electronic vehicle key

20

mainframe

21a, 21b

management system

22-30

communication links

Claims (14)

Communication system (10) for managing usage rights to a vehicle (12), comprising - a vehicle (12) which comprises an in-vehicle communication module (14a, 14b); - a mobile terminal (16); and - an electronic vehicle key (18) which is set up to communicate with the in-vehicle communication module (14a, 14b) and with the mobile terminal (16) and by means of which usage rights to the vehicle (12) can be assigned; The use of the mobile terminal (16) can be used to control the assignment of usage rights to the vehicle (12) that can be carried out by the electronic vehicle key (18), characterized in that vehicle functions and / or mobile online services can be acquired by means of the electronic vehicle key (18) and the acquisition of the vehicle functions and / or the mobile online services which can be carried out by means of the electronic vehicle key (18) can be controlled by means of the mobile terminal (16). Communication system (10) after Claim 1 , characterized in that the electronic vehicle key (18) can be used to withdraw rights of use to the vehicle (12) and the withdrawal of rights of use to the vehicle (12) which can be carried out by means of the electronic vehicle key (18) can be controlled by means of the mobile terminal (16). Communication system (10) after Claim 1 or 2 , characterized in that the usage rights to the vehicle (12) comprise individual or all vehicle functions. Communication system (10) according to one of the preceding claims, characterized in that the assignment and / or the withdrawal of rights of use to the vehicle (12) is entity-related, preferably personal. Communication system (10) according to one of the preceding claims, characterized in that the acquired vehicle functions and / or the acquired mobile online services can also be used with several vehicles. Communication system (10) according to one of the preceding claims, characterized by an administration system (21a, 21b) which is set up to manage the usage rights to vehicles and / or the acquisition of vehicle functions and / or mobile online services. Communication system (10) after Claim 6 , characterized in that a vehicle management application is installed on the electronic vehicle key (18) and / or the mobile terminal (16) and is configured to access the management system (21a, 21b). Communication system (10) after Claim 7 , characterized in that the vehicle management application is set up to display on the mobile terminal (16) a graphical interface for managing the usage rights to the vehicle (12) and / or for acquiring vehicle functions and mobile online services. Communication system (10) according to one of the Claims 6 to 8th , characterized in that at least part of the management system (21a, 21b) is designed as a decentralized management system (21a, 21b) on the electronic vehicle key (18). Communication system (10) according to one of the Claims 6 to 9 characterized by a central computer (20), the central computer (20) comprising at least part of the management system (21a, 21b). Communication system (10) according to one of the preceding claims, characterized in that the mobile terminal (16) is set up to release an internal communication module to the electronic vehicle key (18), the electronic vehicle key (18) being set up to release the released internal communication module to use the mobile terminal (16). Communication system (10) according to one of the preceding claims, characterized in that the electronic vehicle key (18) is set up to authorize other electronic vehicle keys (18) for communication with an in-vehicle communication module (14a, 14b). Communication system (10) according to one of the preceding claims, characterized in that the electronic vehicle key (18) is a personalized and / or personal electronic vehicle key (18). Communication system (10) according to one of the preceding claims, characterized in that the electronic vehicle key (18) is set up to cryptographically secure messages to be sent against modification and / or interception, in particular to sign them cryptographically.

Images